Changes 2026

As you can see, things around here have changed a little. This site will celebrate its 20th anniversary next month. Due to site migrations and Rich’s advancing age, we’re not quite sure the date of the first post. It was either August 7th or August 20th 2006. That was several database migrations ago. Attribution is hard and the timeline doesn’t entirely line up with BourbonKitten.

Going to RSAC 2026? Disaster Recovery Breakfast and MORE!

Someone asked me last week if I was going to RSAC. I replied that I’m pretty sure after I die they’ll prop my body up in a corner of Moscone, Irish wake style. Eventually I’ll retire or move on, but this year isn’t THAT year. I still get tremendous value out of RSAC. Personally I spend nearly no time on the show floor, a lot of time in meetings, and a bit of time in sessions. As a review committee member I see all the content for my track before I show up and I think most people who complain about the conference get blasted by the show floor and don’t go to sessions. The content has improved materially over the past decade, with more deep technical content than most people realize. This year I’m presenting in four sessions (unexpectedly). I’m co-presenting with Aaron Turner on some IANS content on MCP/agent architectures we collaborated on. I’m running a cloud incident analysis workshop with Ryan Bergsma, one of my Cloud Security Alliance co-workers. I’m giving a new presentation on K-12 and “below the security poverty line” orgs with a first-time collaborator, Michael Klein, and I’m facilitating a Fundamentals Forum. I’m also presenting at our CSA Summit on Monday (on the Governance hierarchy… and announcing a new CSA initiative), participating in a panel on OpenClaw, and… yeah, busy week. For the first time we are offering 1-on-1’s to CSA members at the Summit! Yes, I am voluntarily packing my schedule every 30 minutes like back in Gartner days. Just email me for more info on that. But I saved the best for last. The 16th annual Disaster Recovery Breakfast! And for the second time this is hosted by our friends over at 1Password (like, actual friends I’ve known for decades). My kids are on spring break this week and all my content is approved, so I’m off for some family time before my four day marathon, I hope to see you there, and email me at rmogull@securosis.com if you want to catch up or snag one of those 1-on-1 slots on Monday.

The 15th Annual Disaster Recovery Breakfast

It has survived recessions, obsessions, parenthood, natural disasters, pandemics, unnatural disasters, and the rise and fall of eateries great and small. That’s right, it’s the Securosis RSAC Disaster Recovery Breakfast! This year we’ve changed things up thanks to our new partner, 1Password, who reached out and offered to host the DRB in their event space just up the street from the Moscone center. With all the changes in the restaurant scene in that particular area of town… you can understand how this… reduced our annual organizational stress. As always this is a quiet hangout of an event. Drop in and out as you please to catch up with friends, strangers, and… well, whoever wanders in. An RSVP is appreciated to make sure we have enough food, but as always is not required. We hope to see you there! Optional RSVP at https://events.1password.io/RSA2025#

Announcing the CloudSLAW Patreon!

TL;DR: Support CloudSLAW Here!

I know that as most of you lay your weary heads to rest every night (or morning, for you night shifters), the last thought that fires through your synapses is, “I really wish I could get more CloudSLAW!”

Old Dog, New Tricks [Final Incite: June 24, 2024]

TL;DR: Back in December, I took a job as head of strategy and technology for a candy-importing company called Dorval Trading. To explain the move I dusted off the confessor structure, and also performed a POPE evaluation of the opportunity below. I’ll be teaching at Black Hat this summer, so I hope to see many of you there. Otherwise you can always reach me at my Securosis email, at least until Rich cancels my account.